2001Unpublished venueRequires access

A pattern language for security models

Eduardo B. Fernández, Rouyi Pan

Open publisher page 143 citations

Abstract

Security is a serious problem in the Internet and it is necessary to build new systems incorporating security as integral part of their design. The use of patterns is a good tool to help designers build secure systems. We discuss three patterns that correspond to the most common models for security: Authorization, Role-Based Access Control, and Multilevel Security. These can be applied in all the levels of the system and we show their use in the definition of a pattern for file authorization.

About this research paper

What this paper is about

Security is a serious problem in the Internet and it is necessary to build new systems incorporating security as integral part of their design. The use of patterns is a good tool to help designers build secure systems. We discuss three patterns that correspond to the most common models for security: Authorization, Role-Based Access Control, and Multilevel Security. These can be applied in all the levels of the system and we show their use in the definition of a pattern for file authorization.

Why it matters

OpenAlex reports 143 citations for this work. Citation counts describe recorded attention and do not establish research quality.

Key contribution

A contribution statement is not available in the OpenAlex record.

Method / approach

Method details are not available in the OpenAlex metadata.

Main findings

Findings are not separately available in the OpenAlex metadata.

Limitations

Limitations are not available in the OpenAlex metadata.

Applications

Application details are not available in the OpenAlex metadata.

Available abstract

Security is a serious problem in the Internet and it is necessary to build new systems incorporating security as integral part of their design. The use of patterns is a good tool to help designers build secure systems. We discuss three patterns that correspond to the most common models for security: Authorization, Role-Based Access Control, and Multilevel Security. These can be applied in all the levels of the system and we show their use in the definition of a pattern for file authorization.

Key concepts: Computer science, Computer security model, Access control, Computer security, Authorization, Security through obscurity, Security service, The Internet

Related papers

Back to paper searchBrowse research topicsOriginal source
A pattern language for security models — Research Paper | ScholarLens